Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB654C6248C911EFA512F641762E951A.roa
File: BB654C6248C911EFA512F641762E951A.roa (raw, json)
Hash identifier: 22xSjVgpUCL/EVhp06YKX3INMQx8ANcl+tYgueTC3RA=
Subject key identifier: 3F:1B:6C:5B:52:E5:CF:5A:D5:3B:F6:C3:33:D3:6A:D2:5C:AE:46:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 9E8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB654C6248C911EFA512F641762E951A.roa
Signing time: Tue 23 Jul 2024 08:01:14 +0000
ROA not before: Fri 26 Jul 2024 08:01:11 +0000
ROA not after: Fri 23 Aug 2024 08:01:11 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40590 (0x9e8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 08:01:11 2024 GMT
Not After : Aug 23 08:01:11 2024 GMT
Subject: CN=669f634a-9e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f3:1e:5f:19:49:87:37:c1:5f:c7:ca:3d:d3:
3a:f7:5b:88:82:59:5e:3c:71:1e:31:e0:c9:bc:63:
94:f7:6e:15:df:96:36:90:86:c9:6d:d9:22:5c:80:
8c:55:86:13:8f:b2:fe:04:1d:f3:b5:51:82:0f:7a:
85:db:66:87:17:a6:cb:29:0f:87:05:43:c7:5f:73:
41:45:ea:85:89:c1:6f:fc:a6:65:cf:3d:5a:21:a6:
d1:ea:46:c3:68:7e:84:17:c7:7f:bc:ce:c8:fa:b6:
26:fb:0c:d5:e8:cf:56:96:73:b1:2a:b3:85:d1:e7:
d3:fb:36:0a:fe:42:92:ad:93:ba:e7:85:3b:61:d8:
1a:85:42:7e:8e:f9:5d:97:6b:fb:94:3f:7f:da:f9:
e7:c3:d2:18:f8:ff:a5:5b:6c:c6:7e:7d:9e:6c:b9:
9a:05:2e:e8:e5:2a:98:51:41:aa:0b:ec:b1:74:fe:
cd:49:1d:5f:91:5f:bc:53:4b:88:b3:db:17:25:6d:
48:a6:2d:4e:ca:82:ae:db:38:a6:08:8e:86:a7:b5:
f5:f3:c3:07:bf:92:cf:39:35:c0:b3:5c:8b:df:d1:
de:8f:f2:b5:29:b7:0d:b0:8e:8d:94:c7:81:5a:fc:
93:15:d3:b5:ac:f8:82:30:8a:b1:71:90:c7:0c:fe:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1B:6C:5B:52:E5:CF:5A:D5:3B:F6:C3:33:D3:6A:D2:5C:AE:46:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB654C6248C911EFA512F641762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8b:e0:a5:8e:6e:67:8c:59:5f:05:46:7d:2b:6c:13:77:a1:
8d:f8:b6:2a:49:9e:0f:5e:df:c5:8a:d4:6f:83:e3:85:14:5c:
6d:37:d6:38:4c:4b:9f:d9:bf:cd:46:58:ea:12:10:03:5a:01:
78:0d:bc:d5:41:e6:02:28:c6:96:95:0a:69:d5:40:10:63:bb:
47:37:47:72:2c:4d:93:77:64:72:7d:50:b4:03:92:aa:7f:ba:
f9:7d:b8:66:f2:68:ec:18:21:74:86:a0:82:b2:c1:27:15:fc:
8a:d4:ac:b5:13:11:6b:27:bd:bd:f8:94:15:cd:b4:62:49:6c:
62:10:31:45:6c:ae:e2:1e:ca:e3:a4:62:68:22:98:03:c7:0f:
88:46:bc:d3:72:d3:40:03:ad:b0:21:f5:c3:03:bf:3b:f7:82:
0e:df:56:2c:12:ea:09:2b:12:cf:97:63:99:ec:93:b8:90:d2:
99:1c:d1:45:ab:ae:1e:1d:c7:a1:1b:77:e6:8d:ae:bd:88:f7:
63:23:b6:50:f6:29:89:61:e5:f2:7d:51:8b:ac:20:70:17:35:
08:02:24:7d:68:b5:32:4c:24:4e:c9:32:54:04:e2:8d:de:e0:
d8:31:05:62:92:3f:8e:75:ba:84:89:c3:9e:5c:e6:f0:42:5c:
70:0c:c0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:48 2024 by rpki-client on console-fra.rpki-client.org